CVE-2022-2586

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

Affected products

Alt Linux, Almalinux, Astra Linux, Centos, Linux Kernel, Linuxmint, Red Hat, Red Os

Linux Linux Kernel

< 4.14.316, 4.19.256, 5.4.211, 5.10.137, 5.15.61, 5.18.18, 5.19.2

CVSS 3.1

7.8 HIGH

EPSS

10.5% (95th percentile)

Weakness

CWE-416

NVD status

Analyzed

Published

2024-01-08